diff options
| author | Maxim Levitsky <mlevitsk@redhat.com> | 2022-10-25 15:47:32 +0300 |
|---|---|---|
| committer | Paolo Bonzini <pbonzini@redhat.com> | 2022-10-28 13:10:30 +0300 |
| commit | 696db303e54f7352623d9f640e6c51d8fa9d5588 (patch) | |
| tree | b9b0ef36715305cf7aaec067d78ece54eca06a05 /arch/x86/kvm/xen.c | |
| parent | ad8f9e69942c7db90758d9d774157e53bce94840 (diff) | |
| download | linux-696db303e54f7352623d9f640e6c51d8fa9d5588.tar.xz | |
KVM: x86: smm: number of GPRs in the SMRAM image depends on the image format
On 64 bit host, if the guest doesn't have X86_FEATURE_LM, KVM will
access 16 gprs to 32-bit smram image, causing out-ouf-bound ram
access.
On 32 bit host, the rsm_load_state_64/enter_smm_save_state_64
is compiled out, thus access overflow can't happen.
Fixes: b443183a25ab61 ("KVM: x86: Reduce the number of emulator GPRs to '8' for 32-bit KVM")
Signed-off-by: Maxim Levitsky <mlevitsk@redhat.com>
Reviewed-by: Sean Christopherson <seanjc@google.com>
Message-Id: <20221025124741.228045-15-mlevitsk@redhat.com>
Cc: stable@vger.kernel.org
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
Diffstat (limited to 'arch/x86/kvm/xen.c')
0 files changed, 0 insertions, 0 deletions